This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45n1PPpSq9Wox8HTkpWcOV854n4.cer File: 45n1PPpSq9Wox8HTkpWcOV854n4.cer (raw, json) Hash identifier: x9lbHRvMRlXE2Qtnr6+tIRjgx6MbJ3VHylVA/MK7hXo= Subject key identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 0278F9 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer Manifest: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft caRepository: rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Fri 28 Nov 2025 13:07:23 +0000 Certificate not after: Sun 31 Jan 2027 00:00:00 +0000 Subordinate resources: IP: 103.243.160.0/22 IP: 2400:3d80::/32 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 06:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162041 (0x278f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Nov 28 13:07:23 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=A912D0B6, serialNumber=E399F53CFA52ABD5A8C7C1D392959C395F39E27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:8c:60:f2:e7:10:74:a7:59:84:5b:08:ba: a2:2a:cd:84:63:ae:dd:7b:94:50:99:56:10:fa:3e: 44:55:d8:27:00:31:77:14:8f:c0:3d:74:71:d8:b9: 86:b4:76:83:76:a2:7a:38:43:a3:47:2c:8d:13:59: ce:89:0b:f7:57:79:c3:f1:67:13:95:e0:16:d4:38: 8d:49:0e:ae:3f:1c:89:57:1c:dc:7d:d4:d3:02:c6: fd:a9:f1:f4:12:8a:42:16:be:29:05:34:42:55:0a: 5c:af:c2:23:a3:88:50:42:9e:aa:4d:6a:0a:58:23: 3e:a5:75:8c:6f:3b:df:d7:2b:79:3e:98:d4:35:38: ae:07:a1:ff:5c:60:87:81:55:ec:17:38:ba:32:b2: e2:b0:c6:23:96:bd:a3:6c:f3:79:5d:41:e5:9b:ff: 6b:e7:41:d2:78:4a:f8:19:55:b2:5b:e5:a4:57:1e: 6e:89:8b:51:43:09:4f:a9:2b:cf:20:8c:c7:3d:26: 45:f9:f3:50:fa:e2:e8:0c:cf:f5:c3:a4:c6:26:27: 55:68:dc:f6:7a:2a:92:4c:bd:cc:9b:20:d9:30:6f: f3:88:de:49:6f:61:e3:af:0c:7c:26:65:e2:46:2b: 9f:bc:b0:92:f2:fb:90:a5:c2:dd:dd:79:d5:62:f3: f3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:99:F5:3C:FA:52:AB:D5:A8:C7:C1:D3:92:95:9C:39:5F:39:E2:7E X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A912D0B6/D4F1C526835C11E99F17C514C4F9AE02/45n1PPpSq9Wox8HTkpWcOV854n4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.243.160.0/22 IPv6: 2400:3d80::/32 Signature Algorithm: sha256WithRSAEncryption ac:b3:5a:65:ef:02:b9:0c:a0:e0:ea:54:82:83:8d:5a:8e:cc: f8:86:34:9a:fe:86:35:48:87:ac:81:e9:1a:18:a2:57:30:d0: 36:cd:b0:e6:25:73:c8:13:e0:a8:39:a0:8e:3a:b0:c0:ae:29: 9a:d9:6d:f2:a9:68:5f:15:e2:6c:a3:f7:c9:04:5a:e9:de:5d: 14:83:ac:c4:9e:78:db:e9:72:82:23:46:21:79:d2:59:50:17: ab:44:f6:c8:fb:6c:0a:c4:14:b2:f6:e0:63:cc:10:58:37:80: 4a:c4:b4:7a:d3:6d:1b:39:5b:2a:29:ed:65:53:00:7f:8a:21: 61:bc:22:cb:5c:c4:7e:eb:c6:72:bf:e8:d6:46:51:59:77:4e: 97:37:78:0f:67:a9:a2:88:99:56:1a:95:a5:92:15:7f:e0:f5: c7:a4:19:9b:fd:77:91:fb:0c:04:f7:a1:c1:22:dd:cf:f2:f6: 5c:b8:82:e4:87:cd:04:24:ea:3b:33:c3:c2:b4:83:0a:90:d8: 1d:28:95:95:d9:b8:de:74:8a:01:ba:3c:c4:f3:e9:58:d6:fe: cd:a0:55:78:53:44:d5:b0:04:25:c9:03:13:95:75:ad:59:2f: 70:d4:67:da:77:96:a4:57:9e:13:95:48:b3:3d:38:91:97:81: 58:d9:d0:c1 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIDAnj5MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI1MTEyODEzMDcyM1oXDTI3MDEzMTAwMDAwMFowRjERMA8G A1UEAxMIQTkxMkQwQjYxMTAvBgNVBAUTKEUzOTlGNTNDRkE1MkFCRDVBOEM3QzFE MzkyOTU5QzM5NUYzOUUyN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvhIxg8ucQdKdZhFsIuqIqzYRjrt17lFCZVhD6PkRV2CcAMXcUj8A9dHHYuYa0 doN2ono4Q6NHLI0TWc6JC/dXecPxZxOV4BbUOI1JDq4/HIlXHNx91NMCxv2p8fQS ikIWvikFNEJVClyvwiOjiFBCnqpNagpYIz6ldYxvO9/XK3k+mNQ1OK4Hof9cYIeB VewXOLoysuKwxiOWvaNs83ldQeWb/2vnQdJ4SvgZVbJb5aRXHm6Ji1FDCU+pK88g jMc9JkX581D64ugMz/XDpMYmJ1Vo3PZ6KpJMvcybINkwb/OI3klvYeOvDHwmZeJG K5+8sJLy+5Clwt3dedVi8/OrAgMBAAGjggMCMIIC/jAdBgNVHQ4EFgQU45n1PPpS q9Wox8HTkpWcOV854n4wHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MTJEMEI2L0Q0RjFDNTI2ODM1QzExRTk5RjE3QzUxNEM0RjlBRTAyLzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTEyRDBCNi9ENEYxQzUyNjgzNUMxMUU5OUYxN0M1MTRDNEY5QUUwMi80NW4xUFBw U3E5V294OEhUa3BXY09WODU0bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8EHzAd MAwEAgABMAYDBAJn86AwDQQCAAIwBwMFACQAPYAwDQYJKoZIhvcNAQELBQADggEB AKyzWmXvArkMoODqVIKDjVqOzPiGNJr+hjVIh6yB6RoYolcw0DbNsOYlc8gT4Kg5 oI46sMCuKZrZbfKpaF8V4myj98kEWuneXRSDrMSeeNvpcoIjRiF50llQF6tE9sj7 bArEFLL24GPMEFg3gErEtHrTbRs5Wyop7WVTAH+KIWG8IstcxH7rxnK/6NZGUVl3 Tpc3eA9nqaKImVYalaWSFX/g9cekGZv9d5H7DAT3ocEi3c/y9ly4guSHzQQk6jsz w8K0gwqQ2B0olZXZuN50igG6PMTz6VjW/s2gVXhTRNWwBCXJAxOVda1ZL3DUZ9p3 lqRXnhOVSLM9OJGXgVjZ0ME= -----END CERTIFICATE-----Generated at Sat Dec 6 09:33:05 2025 by rpki-client